Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write.Check if you run itEPSS 0.16%Mar 16, 2026
- High7.8in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write.Check if you run itEPSS 0.18%Mar 16, 2026
- Low3.3in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information improper input.Check if you run itEPSS 0.14%Mar 16, 2026
- High7.0in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through using incompatible type.Check if you run itEPSS 0.15%Mar 16, 2026
- High8.6Tinycontrol devices such as tcPDU and LAN Controllers LK3.5, LK3.9 and LK4 allow a low privileged user to read an administrator's password by directly accessing a spec…Check if you run itEPSS 0.18%Mar 16, 2026
- Medium6.0Browser caching of LAPS passwords in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure…Check if you run itEPSS 0.15%Mar 16, 2026
- Medium6.0Non-working logout functionality in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure…Check if you run itEPSS 0.11%Mar 16, 2026
- Medium6.0Insufficient Session Expiration in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure o…Check if you run itEPSS 0.11%Mar 16, 2026
- High8.6"Functions" module in Raytha CMS allows privileged users to write custom code to add functionality to application.Check if you run itEPSS 0.49%Mar 16, 2026
- Critical9.8claude-hovercraft executeClaudeCode Command Injection Remote Code Execution Vulnerability.Check if you run itEPSS 1.58%Mar 16, 2026
- High8.8A command injection vulnerability exists in mlflow/mlflow versions before v3.7.0, specifically in the file at lines 161-167.Check if you run itEPSS 1.52%Mar 16, 2026
- Medium5.3IBM Aspera Console 3.3.0 through 3.4.8 could allow an attacker to enumerate usernames due to an observable response discrepancy.Check if you run itEPSS 0.26%Mar 16, 2026
- Medium4.9IBM Aspera Console 3.3.0 through 3.4.8 could allow a privileged user to cause a denial of service due to improper enforcement of behavioral workflow.Check if you run itEPSS 0.45%Mar 16, 2026
- Medium4.3IBM Aspera Console 3.3.0 through 3.4.8 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency.Check if you run itEPSS 0.29%Mar 16, 2026
- Medium6.5in OpenHarmony v5.0.3 and prior versions allow a local attacker case sensitive information leak through use of uninitialized resource.Check if you run itEPSS 0.17%Mar 16, 2026
- High8.7Tinycontrol devices such as tcPDU and LAN Controllers LK3.5, LK3.9 and LK4 have two separate authentication mechanisms - one solely for interface management and one fo…Check if you run itEPSS 0.35%Mar 16, 2026
- High7.7Heap-based buffer overflow vulnerability in Softing Industrial Automation GmbH smartLink SW-PN and smartLink SW-HT (Webserver modules) allows overflow buffers.This iss…Check if you run itEPSS 0.51%Mar 16, 2026
- Medium5.3Global file reads caused by improper URL checks in webserver in Softing Industrial Automation GmbH smartLinks on docker (filesystem modules) allows file access.Check if you run itEPSS 0.38%Mar 16, 2026
- Critical9.3Telesquare SKT LTE Router SDT-CS3B1 version 1.2.0 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious content by…Check if you run itEPSS 1.06%Mar 16, 2026
- Critical9.3Telesquare SKT LTE Router SDT-CS3B1 firmware version 1.2.0 contains an insecure direct object reference vulnerability that allows attackers to bypass authorization and…Check if you run itEPSS 0.53%Mar 16, 2026
- High8.7Telesquare SKT LTE Router SDT-CS3B1 software version 1.2.0 contains an unauthenticated remote reboot vulnerability that allows attackers to trigger device reboot witho…Check if you run itEPSS 0.72%Mar 16, 2026
- Medium5.3Telesquare SKT LTE Router SDT-CS3B1 version 1.2.0 contains a cross-site request forgery vulnerability that allows authenticated attackers to execute arbitrary system c…Check if you run itEPSS 0.29%Mar 16, 2026
- High8.7Serviio PRO 1.8 contains an improper access control vulnerability in the Configuration REST API that allows unauthenticated attackers to change the mediabrowser login password.Check if you run itEPSS 0.41%Mar 16, 2026
- Medium5.1Serviio PRO 1.8 DLNA Media Streaming Server contains a DOM-based cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by…Check if you run itEPSS 0.25%Mar 16, 2026
- High8.5Serviio PRO 1.8 contains an unquoted search path vulnerability in the Windows service that allows local users to execute arbitrary code with elevated privileges by pla…Check if you run itEPSS 0.15%Mar 16, 2026
Sort